Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/30ed3e-c4c4-4de8-b4f1-f11a39f26c3b/1/eo0S4RSI8TN9kSN4Ng21N9j6WOI.roa
File:                     eo0S4RSI8TN9kSN4Ng21N9j6WOI.roa (raw, json)
Hash identifier:          BhyxtlXqcAofnuqBwhv9Kjqp3Z99p6OsZP1kYIBSUZ0=
Subject key identifier:   7A:8D:12:E1:14:88:F1:33:7D:91:23:78:36:0D:B5:37:D8:FA:58:E2
Certificate issuer:       /CN=5da3941c27cfe5c234c4bf221ecb2a579b2deaab
Certificate serial:       018E9AB9653DE24B8D5B4B47AAAB277AB4D3
Authority key identifier: 5D:A3:94:1C:27:CF:E5:C2:34:C4:BF:22:1E:CB:2A:57:9B:2D:EA:AB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/XaOUHCfP5cI0xL8iHssqV5st6qs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/80/30ed3e-c4c4-4de8-b4f1-f11a39f26c3b/1/eo0S4RSI8TN9kSN4Ng21N9j6WOI.roa
Signing time:             Mon 01 Apr 2024 17:33:45 +0000
ROA not before:           Mon 01 Apr 2024 17:33:45 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     57271
IP address blocks:        2a0e:5382::/32 maxlen: 32

Validation:               Failed, certificate revoked on Mon 23 Sep 2024 13:24:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8e:9a:b9:65:3d:e2:4b:8d:5b:4b:47:aa:ab:27:7a:b4:d3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5da3941c27cfe5c234c4bf221ecb2a579b2deaab
        Validity
            Not Before: Apr  1 17:33:45 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=7a8d12e11488f1337d912378360db537d8fa58e2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:ac:0c:fb:97:b7:d6:ad:ea:d9:e5:a0:40:4f:
                    7c:32:07:66:04:8b:71:62:38:94:da:09:d5:23:23:
                    ae:3e:42:31:31:a9:a5:39:11:6a:1a:a4:0a:cd:44:
                    89:7a:63:46:ba:ca:9d:b8:82:ed:f4:10:7e:22:e2:
                    e1:6d:3e:75:a1:76:00:03:21:4b:ca:77:bb:2d:10:
                    41:22:50:da:da:5b:84:cf:f4:32:26:3c:78:86:08:
                    50:d7:21:31:ff:26:eb:d9:8d:fa:b0:b9:6a:35:58:
                    76:5f:7f:82:63:bf:10:68:6b:80:5e:a2:dc:0b:b4:
                    9b:6f:a2:99:a4:d2:2c:f6:c9:6a:36:45:41:10:a2:
                    e4:cf:cb:cc:da:3b:72:74:42:be:d9:2f:26:c2:3f:
                    42:60:a1:d7:32:a4:20:dd:b3:10:8b:b4:16:63:a9:
                    d0:0f:68:15:87:c6:1a:9f:90:aa:24:ac:be:86:82:
                    57:79:e0:44:f0:b0:8d:24:10:d5:c0:5b:63:44:88:
                    af:bf:14:fb:7f:fe:c6:62:a4:34:a8:0c:28:cd:b7:
                    7d:82:68:0a:64:65:08:a6:4d:7f:c8:8e:02:20:60:
                    ea:82:c9:7f:03:e0:9f:db:de:b3:64:9d:05:4a:e3:
                    88:09:7f:61:ea:c0:ab:e2:65:94:e7:1c:0a:91:89:
                    95:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:8D:12:E1:14:88:F1:33:7D:91:23:78:36:0D:B5:37:D8:FA:58:E2
            X509v3 Authority Key Identifier:
                keyid:5D:A3:94:1C:27:CF:E5:C2:34:C4:BF:22:1E:CB:2A:57:9B:2D:EA:AB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XaOUHCfP5cI0xL8iHssqV5st6qs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/30ed3e-c4c4-4de8-b4f1-f11a39f26c3b/1/eo0S4RSI8TN9kSN4Ng21N9j6WOI.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/80/30ed3e-c4c4-4de8-b4f1-f11a39f26c3b/1/XaOUHCfP5cI0xL8iHssqV5st6qs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0e:5382::/32

    Signature Algorithm: sha256WithRSAEncryption
         56:63:6d:4d:3b:c5:33:be:74:42:cf:ec:91:07:2f:71:e3:a5:
         fe:52:8e:42:44:7c:d9:c5:f6:39:14:f9:c2:48:bf:66:d2:ca:
         78:d8:5e:cc:d1:51:23:1c:33:7d:e9:90:23:d3:3f:89:cd:72:
         4b:83:f5:ba:3b:52:9a:ae:63:b9:3d:3c:07:57:35:d8:81:04:
         0f:b8:ee:b6:17:6d:3e:a6:3a:4f:46:de:9b:89:83:e2:b3:7c:
         be:f5:d4:cf:64:c7:93:90:0e:01:66:7a:e3:6c:f6:3f:d3:66:
         70:1e:87:6c:6d:d2:96:ef:e6:0f:c4:a6:42:4f:06:f9:f7:fe:
         9b:0f:25:46:3a:af:39:6b:f0:6e:1c:4d:60:c5:35:d6:be:c0:
         e3:eb:94:20:6c:c7:bf:63:f7:38:e0:0b:bd:15:c1:49:fb:a7:
         9c:42:5b:35:53:8c:e7:d5:0a:4b:0e:88:13:68:89:68:03:cc:
         02:e9:5b:19:14:91:f7:4a:ab:b9:52:73:39:a1:4e:59:db:ef:
         37:36:52:e5:a4:3a:78:fb:d1:30:93:5e:85:8c:0b:3c:7e:e1:
         63:d8:81:55:c0:c3:d1:3f:36:2c:e7:fd:11:8d:42:3a:3a:e9:
         da:66:34:6e:c0:b6:22:46:ee:d2:4b:38:89:65:55:b9:f3:62:
         da:3e:ec:e7
-----BEGIN CERTIFICATE-----
MIIE/jCCA+agAwIBAgISAY6auWU94kuNW0tHqqsnerTTMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVkYTM5NDFjMjdjZmU1YzIzNGM0YmYyMjFlY2IyYTU3OWIy
ZGVhYWIwHhcNMjQwNDAxMTczMzQ1WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3YThkMTJlMTE0ODhmMTMzN2Q5MTIzNzgzNjBkYjUzN2Q4ZmE1OGUyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm6wM+5e31q3q2eWgQE98MgdmBItx
YjiU2gnVIyOuPkIxMamlORFqGqQKzUSJemNGusqduILt9BB+IuLhbT51oXYAAyFL
yne7LRBBIlDa2luEz/QyJjx4hghQ1yEx/ybr2Y36sLlqNVh2X3+CY78QaGuAXqLc
C7Sbb6KZpNIs9slqNkVBEKLkz8vM2jtydEK+2S8mwj9CYKHXMqQg3bMQi7QWY6nQ
D2gVh8Yan5CqJKy+hoJXeeBE8LCNJBDVwFtjRIivvxT7f/7GYqQ0qAwozbd9gmgK
ZGUIpk1/yI4CIGDqgsl/A+Cf296zZJ0FSuOICX9h6sCr4mWU5xwKkYmVJwIDAQAB
o4ICCjCCAgYwHQYDVR0OBBYEFHqNEuEUiPEzfZEjeDYNtTfY+ljiMB8GA1UdIwQY
MBaAFF2jlBwnz+XCNMS/Ih7LKlebLeqrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWGFPVUhDZlA1Y0kweEw4aUhzc3FWNXN0NnFzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84MC8zMGVkM2UtYzRjNC00ZGU4LWI0ZjEt
ZjExYTM5ZjI2YzNiLzEvZW8wUzRSU0k4VE45a1NONE5nMjFOOWo2V09JLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84MC8zMGVkM2UtYzRjNC00ZGU4LWI0ZjEtZjExYTM5ZjI2YzNi
LzEvWGFPVUhDZlA1Y0kweEw4aUhzc3FWNXN0NnFzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAKg5TgjAN
BgkqhkiG9w0BAQsFAAOCAQEAVmNtTTvFM750Qs/skQcvceOl/lKOQkR82cX2ORT5
wki/ZtLKeNhezNFRIxwzfemQI9M/ic1yS4P1ujtSmq5juT08B1c12IEED7juthdt
PqY6T0bem4mD4rN8vvXUz2THk5AOAWZ642z2P9NmcB6HbG3Slu/mD8SmQk8G+ff+
mw8lRjqvOWvwbhxNYMU11r7A4+uUIGzHv2P3OOALvRXBSfunnEJbNVOM59UKSw6I
E2iJaAPMAulbGRSR90qruVJzOaFOWdvvNzZS5aQ6ePvRMJNehYwLPH7hY9iBVcDD
0T82LOf9EY1COjrp2mY0bsC2Ikbu0ks4iWVVufNi2j7s5w==
-----END CERTIFICATE-----